grammars-v4 icon indicating copy to clipboard operation
grammars-v4 copied to clipboard

Grammar for Log4Shell vulnerability

Open ifle opened this issue 3 years ago • 2 comments

Hi,

Is there grammar for Log4Shell vulnerability? I would like to use the antlr4 for detecting the Log4Shell vulnerability.

Thanks

ifle avatar Dec 26 '21 06:12 ifle

Could you elaborate on how a parser can help to detect Log4Shell vulnerability?

KvanTTT avatar Jan 01 '22 16:01 KvanTTT

It can help validate the incoming HTTP requests.

https://github.com/NCSC-NL/log4shell/tree/main/detection_mitigation

ifle avatar Jan 01 '22 17:01 ifle